Global Cyber Incident Response Lead

Ernst & Young Advisory Services Sdn Bhd; Diegem; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

EY is seeking a Senior Cyber Incident Response Coordinator to lead global incident management for cybersecurity events. The role emphasizes coordination across geographies, diplomacy, and decisive action under pressure.

Requirements include a strong incident response background, SIEM experience (Splunk/Sentinel), and Windows/Linux proficiency. You will work with Legal, Privacy, and Risk teams to improve processes and ensure effective communications during incidents.

Qualifications

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Engineering, or related field.
• 7+ years’ experience in at least two cyber defense roles (SOC, incident coordination, threat intel, etc.).
• Deep understanding of security threats, incident response and forensic methods.
• Experience with SIEM technologies such as Splunk or Sentinel.
• Familiarity with Windows and Unix/Linux operating systems.

Responsabilités

• Coordinate response efforts to cybersecurity incidents across global teams and partners.
• Interface with Legal, Data Privacy, Risk Management, and other stakeholders.
• Drive integration with other incident management programs for consistency.
• Lead process and documentation development for the CIS team.
• Develop scalable processes for incident response operations and improvements.
• Review performance and identify improvements; implement lessons learned.
• Draft timelines and communicate updates to leadership during incidents.
• Maintain internal playbooks and knowledgebase for the team.
• On-call availability as part of rotating coverage.

Connaissances

Incident response lifecycle

Global incident coordination

Communication skills

Diplomacy under pressure

Risk management

Formation

Bachelor's or Master's in Computer Science or related field

Outils

Splunk

Microsoft Sentinel

Forensic tools

Description du poste

EY is seeking a Senior Cyber Incident Response Coordinator to lead global incident management for cybersecurity events. The role emphasizes coordination across geographies, diplomacy, and decisive action under pressure.

Requirements include a strong incident response background, SIEM experience (Splunk/Sentinel), and Windows/Linux proficiency. You will work with Legal, Privacy, and Risk teams to improve processes and ensure effective communications during incidents.